45d4fc092a689b684a496022ac58bd48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45d4fc092a689b684a496022ac58bd48_JaffaCakes118
Size

91KB
MD5

45d4fc092a689b684a496022ac58bd48
SHA1

104a1f2ce99e76bc40ac7127bf0c4e87440b9776
SHA256

7191193198741d0590223d266d200ce43535dbe2f068efb4f05e6ebbce57464d
SHA512

566be01999ebb3b70a96006b012a8158e42f24ab968bbf85cd2602219833391f0991344a88d10b54bdf4ad2feb78625624c520dbd2156cf80dd3aa94f36dc07c
SSDEEP

1536:tnrQ77HOSOEWY7BLh33YAoQ6UhC3bB5uJdyBFDQHhd/CWFHJd62anhs4Z81X1aI:xQnz1h3fp6QkB5muQXqev6L81F9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d4fc092a689b684a496022ac58bd48_JaffaCakes118

Files

45d4fc092a689b684a496022ac58bd48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32f2429b45117247efc5d0d5c7b4081c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetAtomNameA
AddAtomW
FindFirstChangeNotificationW
SetTimeZoneInformation
GetConsoleCursorMode
GetSystemTimeAdjustment
SetConsoleCursorInfo
SetProcessShutdownParameters
ReadFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE